2304f3080a2880dfe83718a89f3d910baf15483ff0f43cd25574e7fafe0c186c | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 00:10

Sharing

Report Analysis Logs

General

Target

2024_06_30_Lilly_Art_ch_1.pdf
Size

244KB
MD5

8c19106815f7560ea2d3bc0a7293a255
SHA1

f7531cd4d382a7acfb161fd951a7aef09fccaf7d
SHA256

2304f3080a2880dfe83718a89f3d910baf15483ff0f43cd25574e7fafe0c186c
SHA512

28f362fe64de400abe6bd1fadfbfa24899b4c30b3f811688c9dffa4ca4a2ad6b021255e02449ecaba21b868a43be4ff16ea558839da05778c92c895fde710474
SSDEEP

6144:1M8D+rubaBj5oCsrpmvIG//Ax6lAF7hatGVpe8bikqTV:1V+r4asCw8Qwc6Y7k4VfdqJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2964 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2964 AcroRd32.exe
2964 AcroRd32.exe
2964 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2024_06_30_Lilly_Art_ch_1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2964

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
48c136259d1f9989c29713c4d398011c

SHA1
6e2e684c7677b07b2ffd4939f5f867c6a7a9e6b2

SHA256
957636191e98b7769c22464ca7764da225d93ba374dd0e282eb78a4559f7af5d

SHA512
90f085e398025f94eee9be45a870df8fd8b6242388386e44f2e2efdb1f0b3cbf7b5b626162ca06bb28836944bad380e98e8d1a7c4a29742c243ea86615c9ba50

Download Submit